Fuzz introspector: fuzz_post_preserve
For issues and ideas: https://github.com/ossf/fuzz-introspector/issues

Fuzz blockers

The following nodes represent call sites where fuzz blockers occur.

Amount of callsites blocked Calltree index Parent function Callsite Largest blocked function
51 222 _oidc_strnatcasecmp call site: 00222 _oidc_util_url_cur_port
34 171 oidc_original_request_method call site: 00171 oidc_util_url_redirect_uri
33 336 oidc_response_post_preserve_javascript call site: 00336 oidc_util_html_send_in_template
21 106 oidc_cfg_post_config call site: 00106 _oidc_metrics_shm_size
18 377 oidc_util_html_javascript_escape call site: 00377 oidc_util_template_escape
15 206 oidc_http_hdr_in_get call site: 00206 oidc_util_strcasestr
8 318 oidc_util_read_form_encoded_params_impl call site: 00318 _oidc_strcmp
5 136 oidc_cfg_parse_option_impl call site: 00136 oidc_cfg_parse_options_flatten
4 89 oidc_cache_mutex_global_create call site: 00089 oidc_serror
3 77 oidc_test_crypto_passphrase_derive_keys_cached call site: 00077 oidc_test_key_derive_cached
3 102 oidc_cache_mutex_global_create call site: 00102 oidc_serror
3 143 oidc_cfg_dir_parse_pass_userinfo_as call site: 00143

Fuzzer calltree

0 LLVMFuzzerTestOneInput [function] [call site] 00000
1 LLVMFuzzerInitialize [function] [call site] 00001
2 oidc_test_setup [function] [call site] 00002
3 apr_initialize [function] [call site] 00003
3 oidc_pre_config_init [function] [call site] 00004
4 ERR_load_crypto_strings [function] [call site] 00005
4 OpenSSL_add_all_algorithms [function] [call site] 00006
4 OpenSSL_add_all_digests [function] [call site] 00007
4 OPENSSL_init_crypto [function] [call site] 00008
3 oidc_test_set_auth_type [function] [call site] 00009
3 apr_pool_create [function] [call site] 00010
3 oidc_test_request_init [function] [call site] 00011
4 apr_pcalloc [function] [call site] 00012
4 apr_pool_create [function] [call site] 00013
4 apr_table_make [function] [call site] 00014
4 apr_table_make [function] [call site] 00015
4 apr_table_make [function] [call site] 00016
4 apr_table_make [function] [call site] 00017
4 apr_table_set [function] [call site] 00018
4 apr_table_set [function] [call site] 00019
4 apr_table_set [function] [call site] 00020
4 apr_pcalloc [function] [call site] 00021
4 apr_pcalloc [function] [call site] 00022
4 apr_pool_create [function] [call site] 00023
4 apr_pool_create [function] [call site] 00024
4 apr_pcalloc [function] [call site] 00025
4 apr_bucket_alloc_create [function] [call site] 00026
4 apr_pcalloc [function] [call site] 00027
4 apr_pcalloc [function] [call site] 00028
4 apr_pool_userdata_set [function] [call site] 00029
4 apr_uri_parse [function] [call site] 00030
4 oidc_cfg_server_create [function] [call site] 00031
5 oidc_cfg_server_alloc [function] [call site] 00032
6 apr_pcalloc [function] [call site] 00033
6 apr_pcalloc [function] [call site] 00034
6 apr_pool_pre_cleanup_register [function] [call site] 00035
5 OIDC_SVR_CFG_SIMPLE_MEMBERS [function] [call site] 00036
5 oidc_cfg_provider_create [function] [call site] 00037
6 apr_pcalloc [function] [call site] 00038
6 oidc_cfg_provider_init [function] [call site] 00039
7 OIDC_PROVIDER_CFG_SIMPLE_MEMBERS [function] [call site] 00040
5 oidc_cfg_oauth_create [function] [call site] 00041
6 apr_pcalloc [function] [call site] 00042
6 OIDC_OAUTH_CFG_SIMPLE_MEMBERS [function] [call site] 00043
5 oidc_cfg_cache_create_server_config [function] [call site] 00044
6 OIDC_CACHE_CFG_SIMPLE_MEMBERS [function] [call site] 00045
4 oidc_cfg_provider_issuer_set [function] [call site] 00046
4 oidc_cfg_provider_get [function] [call site] 00047
4 oidc_cfg_provider_authorization_endpoint_url_set [function] [call site] 00048
4 oidc_cfg_provider_get [function] [call site] 00049
4 oidc_cfg_provider_client_id_set [function] [call site] 00050
4 oidc_cfg_provider_get [function] [call site] 00051
4 oidc_cfg_dir_config_create [function] [call site] 00052
5 apr_pcalloc [function] [call site] 00053
5 OIDC_DIR_CFG_SIMPLE_MEMBERS [function] [call site] 00054
5 apr_hash_make [function] [call site] 00055
4 apr_pcalloc [function] [call site] 00056
4 apr_pcalloc [function] [call site] 00057
4 ap_set_module_config [function] [call site] 00058
4 ap_set_module_config [function] [call site] 00059
4 apr_array_make [function] [call site] 00060
4 apr_array_make [function] [call site] 00061
4 oidc_test_crypto_passphrase_derive_keys_cached [function] [call site] 00062
5 _oidc_strlen [function] [call site] 00063
6 strlen [function] [call site] 00064
5 oidc_test_key_derive_cached [function] [call site] 00065
6 _oidc_strcmp [function] [call site] 00066
7 strcmp [function] [call site] 00067
6 _oidc_memcpy [function] [call site] 00068
6 oidc_util_key_derive_passphrase_key [function] [call site] 00069
7 _oidc_strlen [function] [call site] 00070
7 PKCS5_PBKDF2_HMAC [function] [call site] 00071
7 _oidc_strlen [function] [call site] 00072
7 EVP_sha256 [function] [call site] 00073
6 _oidc_strlen [function] [call site] 00074
6 _oidc_strcpy [function] [call site] 00075
6 _oidc_memcpy [function] [call site] 00076
5 _oidc_strlen [function] [call site] 00077
5 oidc_test_key_derive_cached [function] [call site] 00078
4 fprintf [function] [call site] 00079
4 exit [function] [call site] 00080
4 getenv [function] [call site] 00081
4 strtol [function] [call site] 00082
4 oidc_cfg_post_config [function] [call site] 00083
5 ap_hook_post_config [function] [call site] 00084
5 oidc_cache_mutex_create [function] [call site] 00085
6 apr_pcalloc [function] [call site] 00086
5 oidc_cache_mutex_post_config [function] [call site] 00087
6 oidc_cache_mutex_global_create [function] [call site] 00088
7 apr_temp_dir_get [function] [call site] 00089
7 oidc_serror [function] [call site] 00090
7 oidc_cache_status2str [function] [call site] 00091
8 apr_strerror [function] [call site] 00092
8 apr_pstrdup [function] [call site] 00093
7 apr_psprintf [function] [call site] 00094
7 getpid [function] [call site] 00095
7 apr_global_mutex_create [function] [call site] 00096
7 oidc_serror [function] [call site] 00097
7 oidc_cache_status2str [function] [call site] 00098
7 ap_unixd_set_global_mutex_perms [function] [call site] 00099
7 oidc_serror [function] [call site] 00100
7 oidc_cache_status2str [function] [call site] 00101
7 oidc_slog [function] [call site] 00102
6 apr_thread_mutex_create [function] [call site] 00103
6 oidc_serror [function] [call site] 00104
6 oidc_cache_status2str [function] [call site] 00105
5 oidc_metrics_post_config [function] [call site] 00106
6 apr_shm_create [function] [call site] 00107
6 _oidc_metrics_shm_size [function] [call site] 00108
7 _oidc_metrics_get_env_int [function] [call site] 00109
8 _oidc_str_to_int [function] [call site] 00110
9 _oidc_str_to_int_checked [function] [call site] 00111
10 strtol [function] [call site] 00112
8 getenv [function] [call site] 00113
7 oidc_serror [function] [call site] 00114
6 apr_shm_baseaddr_get [function] [call site] 00115
6 _oidc_memset [function] [call site] 00116
6 _oidc_metrics_shm_size [function] [call site] 00117
6 apr_thread_create [function] [call site] 00118
6 getpid [function] [call site] 00119
6 apr_hash_make [function] [call site] 00120
6 apr_hash_make [function] [call site] 00121
6 oidc_cache_mutex_create [function] [call site] 00122
6 oidc_cache_mutex_post_config [function] [call site] 00123
6 oidc_cache_mutex_create [function] [call site] 00124
6 oidc_cache_mutex_post_config [function] [call site] 00125
4 fprintf [function] [call site] 00126
4 exit [function] [call site] 00127
4 oidc_cfg_dir_post_config [function] [call site] 00128
5 apr_array_make [function] [call site] 00129
5 oidc_cfg_dir_parse_pass_userinfo_as [function] [call site] 00130
6 _oidc_strstr [function] [call site] 00131
7 strstr [function] [call site] 00132
6 apr_pstrndup [function] [call site] 00133
6 oidc_cfg_parse_option [function] [call site] 00134
7 oidc_cfg_parse_option_impl [function] [call site] 00135
8 fstrcmp [function] [call site] 00136
8 apr_psprintf [function] [call site] 00137
8 oidc_cfg_parse_options_flatten [function] [call site] 00138
9 apr_psprintf [function] [call site] 00139
9 apr_psprintf [function] [call site] 00140
9 apr_psprintf [function] [call site] 00141
6 OIDC_CFG_OPTIONS_SIZE [function] [call site] 00142
6 apr_pcalloc [function] [call site] 00143
6 apr_pstrdup [function] [call site] 00144
4 fprintf [function] [call site] 00145
4 exit [function] [call site] 00146
4 oidc_http_curl_pool_init [function] [call site] 00147
5 apr_thread_mutex_create [function] [call site] 00148
5 apr_pool_cleanup_register [function] [call site] 00149
2 oidc_test_pool_get [function] [call site] 00150
2 oidc_cfg_server_create [function] [call site] 00151
2 oidc_test_request_get [function] [call site] 00152
2 apr_hash_make [function] [call site] 00153
2 apr_hash_set [function] [call site] 00154
2 apr_hash_set [function] [call site] 00155
1 apr_pool_create [function] [call site] 00156
1 oidc_test_pool_get [function] [call site] 00157
1 oidc_test_request_get [function] [call site] 00158
1 apr_table_copy [function] [call site] 00159
1 fuzz_strndup [function] [call site] 00160
2 apr_palloc [function] [call site] 00161
2 memcpy [function] [call site] 00162
1 strchr [function] [call site] 00163
1 apr_table_set [function] [call site] 00164
1 strlen [function] [call site] 00165
1 oidc_response_post_preserve_javascript [function] [call site] 00166
2 oidc_cfg_dir_preserve_post_get [function] [call site] 00167
2 oidc_debug [function] [call site] 00168
2 ap_get_module_config [function] [call site] 00169
2 oidc_original_request_method [function] [call site] 00170
3 oidc_util_url_matches_redirect_uri [function] [call site] 00171
4 oidc_util_url_cur_matches [function] [call site] 00172
5 _oidc_memset [function] [call site] 00173
5 apr_uri_parse [function] [call site] 00174
5 oidc_debug [function] [call site] 00175
5 _oidc_strcmp [function] [call site] 00176
4 oidc_util_url_redirect_uri [function] [call site] 00177
5 oidc_util_url_abs [function] [call site] 00178
6 apr_pstrcat [function] [call site] 00179
6 _oidc_util_url_base_cur [function] [call site] 00180
7 oidc_cfg_x_forwarded_headers_check [function] [call site] 00181
8 oidc_check_x_forwarded_hdr [function] [call site] 00182
9 oidc_util_spaced_string_contains [function] [call site] 00183
10 oidc_util_spaced_string_to_hashtable [function] [call site] 00184
11 apr_pstrdup [function] [call site] 00185
11 apr_hash_make [function] [call site] 00186
11 ap_getword_white [function] [call site] 00187
12 apr_isspace [function] [call site] 00188
12 apr_pstrmemdup [function] [call site] 00189
12 apr_isspace [function] [call site] 00190
11 apr_hash_set [function] [call site] 00191
10 apr_hash_get [function] [call site] 00192
9 apr_table_get [function] [call site] 00193
9 hdr_func [function] [call site] 00194
9 oidc_warn [function] [call site] 00195
9 oidc_warn [function] [call site] 00196
8 oidc_check_x_forwarded_hdr [function] [call site] 00197
8 oidc_check_x_forwarded_hdr [function] [call site] 00198
8 oidc_check_x_forwarded_hdr [function] [call site] 00199
7 _oidc_util_url_cur_scheme [function] [call site] 00200
8 oidc_http_hdr_forwarded_get [function] [call site] 00201
9 apr_psprintf [function] [call site] 00202
9 oidc_http_hdr_in_forwarded_get [function] [call site] 00203
10 oidc_http_hdr_in_get_left_most_only [function] [call site] 00204
11 oidc_http_hdr_in_get [function] [call site] 00205
12 apr_table_get [function] [call site] 00206
12 oidc_debug [function] [call site] 00207
11 apr_strtok [function] [call site] 00208
11 apr_pstrdup [function] [call site] 00209
9 oidc_util_strcasestr [function] [call site] 00210
10 tolower [function] [call site] 00211
10 tolower [function] [call site] 00212
9 _oidc_strlen [function] [call site] 00213
9 _oidc_strstr [function] [call site] 00214
9 _oidc_strstr [function] [call site] 00215
9 apr_pstrdup [function] [call site] 00216
8 oidc_http_hdr_in_x_forwarded_proto_get [function] [call site] 00217
9 oidc_http_hdr_in_get_left_most_only [function] [call site] 00218
8 ap_http_method [function] [call site] 00219
8 ap_http_scheme [function] [call site] 00220
8 _oidc_strnatcasecmp [function] [call site] 00221
9 apr_strnatcasecmp [function] [call site] 00222
8 _oidc_strnatcasecmp [function] [call site] 00223
8 oidc_warn [function] [call site] 00224
7 oidc_util_url_cur_host [function] [call site] 00225
8 oidc_http_hdr_forwarded_get [function] [call site] 00226
8 oidc_http_hdr_in_x_forwarded_host_get [function] [call site] 00227
9 oidc_http_hdr_in_get_left_most_only [function] [call site] 00228
8 oidc_http_hdr_in_host_get [function] [call site] 00229
9 oidc_http_hdr_in_get [function] [call site] 00230
8 apr_pstrdup [function] [call site] 00231
8 strchr [function] [call site] 00232
8 strchr [function] [call site] 00233
8 strchr [function] [call site] 00234
8 ap_get_server_name [function] [call site] 00235
7 _oidc_util_url_cur_port [function] [call site] 00236
8 oidc_http_hdr_in_x_forwarded_port_get [function] [call site] 00237
9 oidc_http_hdr_in_get_left_most_only [function] [call site] 00238
8 oidc_http_hdr_forwarded_get [function] [call site] 00239
8 oidc_http_hdr_in_x_forwarded_host_get [function] [call site] 00240
8 _oidc_util_url_port_from_host_hdr [function] [call site] 00241
9 strchr [function] [call site] 00242
9 strchr [function] [call site] 00243
8 oidc_http_hdr_in_host_get [function] [call site] 00244
8 _oidc_util_url_port_from_host_hdr [function] [call site] 00245
8 oidc_http_hdr_in_x_forwarded_proto_get [function] [call site] 00246
8 oidc_http_hdr_forwarded_get [function] [call site] 00247
8 _oidc_strnatcasecmp [function] [call site] 00248
8 _oidc_strnatcasecmp [function] [call site] 00249
8 apr_psprintf [function] [call site] 00250
7 apr_psprintf [function] [call site] 00251
7 apr_pstrcat [function] [call site] 00252
6 oidc_cfg_x_forwarded_headers_get [function] [call site] 00253
6 oidc_debug [function] [call site] 00254
5 oidc_cfg_redirect_uri_get [function] [call site] 00255
3 oidc_is_discovery_response [function] [call site] 00256
4 oidc_util_url_has_parameter [function] [call site] 00257
5 apr_psprintf [function] [call site] 00258
5 apr_psprintf [function] [call site] 00259
5 _oidc_strstr [function] [call site] 00260
5 _oidc_strstr [function] [call site] 00261
4 oidc_util_url_has_parameter [function] [call site] 00262
3 oidc_util_url_parameter_get [function] [call site] 00263
4 apr_psprintf [function] [call site] 00264
4 _oidc_strlen [function] [call site] 00265
4 _oidc_strlen [function] [call site] 00266
4 apr_pstrmemdup [function] [call site] 00267
4 _oidc_strlen [function] [call site] 00268
4 apr_strtok [function] [call site] 00269
4 _oidc_strncmp [function] [call site] 00270
5 strncmp [function] [call site] 00271
4 apr_pstrdup [function] [call site] 00272
4 oidc_http_url_decode [function] [call site] 00273
5 _oidc_strlen [function] [call site] 00274
5 apr_palloc [function] [call site] 00275
5 oidc_http_url_decode_hex_digit [function] [call site] 00276
5 oidc_http_url_decode_hex_digit [function] [call site] 00277
4 apr_strtok [function] [call site] 00278
3 apr_pstrdup [function] [call site] 00279
3 oidc_cfg_dir_preserve_post_get [function] [call site] 00280
3 oidc_http_hdr_in_content_type_get [function] [call site] 00281
4 oidc_http_hdr_in_get [function] [call site] 00282
3 _oidc_strcmp [function] [call site] 00283
3 oidc_debug [function] [call site] 00284
2 _oidc_strcmp [function] [call site] 00285
2 apr_table_make [function] [call site] 00286
2 oidc_util_read_post_params [function] [call site] 00287
3 oidc_util_read_post_params_impl [function] [call site] 00288
4 oidc_http_hdr_in_content_type_get [function] [call site] 00289
4 _oidc_strstr [function] [call site] 00290
4 oidc_debug [function] [call site] 00291
4 oidc_util_read [function] [call site] 00292
5 ap_setup_client_block [function] [call site] 00293
5 ap_should_client_block [function] [call site] 00294
5 oidc_error [function] [call site] 00295
5 apr_palloc [function] [call site] 00296
5 oidc_error [function] [call site] 00297
5 ap_get_client_block [function] [call site] 00298
6 strlen [function] [call site] 00299
6 memcpy [function] [call site] 00300
5 oidc_error [function] [call site] 00301
4 oidc_util_read_form_encoded_params_impl [function] [call site] 00302
5 ap_getword [function] [call site] 00303
6 apr_pstrmemdup [function] [call site] 00304
5 ap_getword [function] [call site] 00305
5 oidc_http_url_decode [function] [call site] 00306
5 oidc_http_url_decode [function] [call site] 00307
5 oidc_util_param_must_not_repeat [function] [call site] 00308
6 _oidc_strcmp [function] [call site] 00309
5 apr_table_get [function] [call site] 00310
5 oidc_error [function] [call site] 00311
5 oidc_debug [function] [call site] 00312
5 oidc_http_param_is_sensitive [function] [call site] 00313
6 _oidc_strcmp [function] [call site] 00314
5 apr_table_set [function] [call site] 00315
5 oidc_debug [function] [call site] 00316
5 _oidc_strlen [function] [call site] 00317
5 apr_table_elts [function] [call site] 00318
4 apr_table_elts [function] [call site] 00319
4 _oidc_strcmp [function] [call site] 00320
4 oidc_util_userdata_set_post_param [function] [call site] 00321
5 apr_pool_userdata_get [function] [call site] 00322
5 apr_table_make [function] [call site] 00323
5 apr_table_set [function] [call site] 00324
5 apr_pool_userdata_set [function] [call site] 00325
2 oidc_error [function] [call site] 00326
2 apr_table_elts [function] [call site] 00327
2 apr_array_make [function] [call site] 00328
2 apr_psprintf [function] [call site] 00329
2 oidc_http_url_encode [function] [call site] 00330
3 _oidc_strlen [function] [call site] 00331
3 apr_palloc [function] [call site] 00332
2 oidc_http_url_encode [function] [call site] 00333
2 apr_psprintf [function] [call site] 00334
2 apr_array_pstrcat [function] [call site] 00335
2 oidc_cfg_post_preserve_template_get [function] [call site] 00336
2 oidc_util_html_send_in_template [function] [call site] 00337
3 oidc_util_file_read [function] [call site] 00338
4 oidc_util_file_read_core [function] [call site] 00339
5 oidc_util_file_is_regular [function] [call site] 00340
6 apr_stat [function] [call site] 00341
5 apr_cpystrn [function] [call site] 00342
5 apr_cpystrn [function] [call site] 00343
5 apr_file_open [function] [call site] 00344
5 apr_strerror [function] [call site] 00345
5 apr_file_lock [function] [call site] 00346
5 apr_file_seek [function] [call site] 00347
5 apr_file_info_get [function] [call site] 00348
5 apr_strerror [function] [call site] 00349
5 apr_snprintf [function] [call site] 00350
5 apr_palloc [function] [call site] 00351
5 apr_file_read_full [function] [call site] 00352
5 apr_strerror [function] [call site] 00353
5 apr_snprintf [function] [call site] 00354
5 apr_file_unlock [function] [call site] 00355
5 apr_file_close [function] [call site] 00356
5 apr_file_unlock [function] [call site] 00357
5 apr_file_close [function] [call site] 00358
4 oidc_debug [function] [call site] 00359
4 oidc_warn [function] [call site] 00360
4 oidc_warn [function] [call site] 00361
4 oidc_error [function] [call site] 00362
3 oidc_error [function] [call site] 00363
3 oidc_util_template_format_valid [function] [call site] 00364
3 oidc_error [function] [call site] 00365
3 apr_psprintf [function] [call site] 00366
3 oidc_util_template_escape [function] [call site] 00367
4 oidc_util_html_escape [function] [call site] 00368
5 oidc_util_html_escape_with [function] [call site] 00369
6 escape_char [function] [call site] 00370
6 _oidc_strlen [function] [call site] 00371
6 apr_pcalloc [function] [call site] 00372
6 escape_char [function] [call site] 00373
6 _oidc_strlen [function] [call site] 00374
6 _oidc_strcpy [function] [call site] 00375
4 oidc_util_html_javascript_escape [function] [call site] 00376
5 oidc_util_html_escape_with [function] [call site] 00377
4 apr_pstrdup [function] [call site] 00378
3 oidc_util_template_escape [function] [call site] 00379
3 oidc_util_http_content_prep [function] [call site] 00380
4 oidc_request_state_set [function] [call site] 00381
5 oidc_request_state [function] [call site] 00382
6 apr_pool_userdata_get [function] [call site] 00383
6 apr_hash_make [function] [call site] 00384
6 apr_pool_userdata_set [function] [call site] 00385
5 apr_hash_set [function] [call site] 00386
4 oidc_request_state_set [function] [call site] 00387
4 oidc_request_state_set [function] [call site] 00388
4 oidc_request_state_set [function] [call site] 00389
4 apr_psprintf [function] [call site] 00390
4 oidc_request_state_set [function] [call site] 00391
4 oidc_request_state_set [function] [call site] 00392
4 oidc_request_state_set [function] [call site] 00393
3 _oidc_strlen [function] [call site] 00394
2 oidc_cfg_post_preserve_template_get [function] [call site] 00395
2 apr_psprintf [function] [call site] 00396
2 apr_psprintf [function] [call site] 00397
2 oidc_util_html_javascript_escape [function] [call site] 00398
2 apr_pstrdup [function] [call site] 00399
2 apr_pstrdup [function] [call site] 00400
1 apr_pool_destroy [function] [call site] 00401